
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json)
Hash identifier: ckYrJ64lpS2Uv6eALyQO4CYcC6LVj4pULonu1gDydMM=
Subject key identifier: 31:EA:A5:C4:1E:1D:4C:37:1D:8F:87:5D:82:47:0C:51:EA:F6:7C:88
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial: 02E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
Manifest number: 02D9
Signing time: Mon 21 Sep 2026 01:06:37 +0000
Manifest this update: Mon 21 Sep 2026 01:06:36 +0000
Manifest next update: Mon 28 Sep 2026 01:06:36 +0000
Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: TGsIQIGFFB0lLPgkJIDOTntJhDX5ePA1d6ryyN+9cQ8=)
2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: 0SaUic0cFmBX4GJg5caQlZtmFukZYlTwm6y1EfuxlnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Validity
Not Before: Sep 21 01:06:36 2026 GMT
Not After : Sep 28 01:06:36 2026 GMT
Subject: CN=6ab0831c-be9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:77:12:60:44:33:8f:bc:b1:14:9a:31:6b:
fc:ed:8a:57:9f:90:75:67:3b:e4:b2:5b:0b:e7:d6:
45:9b:48:8f:6c:6c:c9:6e:04:37:35:c6:06:d3:39:
03:ab:08:8c:06:85:bf:48:6b:11:e9:19:d2:10:5a:
36:2f:3f:ae:bf:b3:9b:50:58:fa:b2:91:f5:33:9d:
f2:0b:43:9b:1a:95:75:6b:97:39:f0:0d:af:98:a1:
08:20:25:ab:e1:11:6f:56:77:98:96:bb:8c:df:7c:
a2:5a:b2:e7:36:5c:96:29:69:86:1e:24:7c:1c:25:
ce:3d:be:59:6a:eb:71:9b:f9:52:c7:01:84:54:20:
ec:db:27:56:99:80:6c:b4:21:a0:78:d6:cc:ab:79:
b4:2d:53:0f:0b:21:d9:e5:eb:80:4e:ab:a1:38:c6:
4a:b7:f8:c4:f4:00:12:15:06:1a:4a:0a:30:b8:97:
5f:23:13:71:e6:58:cb:f1:9a:eb:47:29:b0:49:cf:
a9:4c:09:50:b3:99:6b:18:3b:6f:b0:bf:83:77:37:
bb:5f:9b:f0:66:97:34:20:2a:a8:e5:20:4b:da:73:
8e:04:64:68:db:1a:55:7c:d8:49:43:3e:4a:f2:f6:
61:53:ba:6e:bb:cd:6e:e8:aa:f4:e0:b5:13:3c:87:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:A5:C4:1E:1D:4C:37:1D:8F:87:5D:82:47:0C:51:EA:F6:7C:88
X509v3 Authority Key Identifier:
keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:13:eb:3a:a2:16:e3:30:a6:06:eb:6c:61:e5:2c:9c:2c:1e:
11:d2:e1:94:51:53:05:59:d2:9d:23:32:d6:c8:56:70:e6:0d:
61:dd:55:6b:92:22:f5:1d:e6:80:3a:47:ce:14:db:7f:2e:0e:
30:65:2d:e0:52:7d:14:cc:08:92:59:fb:08:00:00:50:54:5c:
dd:5a:26:6a:cd:4b:63:52:ae:87:67:03:dd:b8:f7:00:a9:de:
17:42:b0:34:1c:3b:2d:50:be:c2:ed:19:85:a6:b4:98:3b:1d:
44:50:16:9a:d7:36:61:0a:4e:38:64:21:0b:07:c0:97:b3:8b:
ec:3a:87:63:82:0b:3f:cb:71:cf:50:cb:74:bc:cf:01:db:22:
c9:00:e2:37:73:91:6c:04:b5:84:29:00:0b:bd:16:c7:ce:9e:
5b:d7:94:4d:66:ec:18:0d:3c:ff:2b:e9:71:0f:55:90:2a:38:
aa:ea:3d:87:51:93:59:ff:9c:d8:70:e3:df:25:87:b4:ac:15:
aa:f8:89:b0:e3:18:7f:64:d6:43:0e:31:a5:34:7e:25:35:bf:
de:38:98:8f:aa:43:c2:e8:91:95:49:a7:14:2a:98:25:3e:cb:
cc:49:2f:dc:d5:30:46:13:5a:1c:98:90:a0:9b:df:d6:38:31:
89:87:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:46 2026 by rpki-client